YYogeshwar PeelaOct 7 · 15 min readTryHackMe - SeaSurfer writeupExecutive Summary The engagement began with a single disclosed virtual host name leaking out of an HTTP response header on the target web server. That one leak unraveled the entire box: it led to a Woexploitnotes.hashnode.dev
VVũ Nhật LâmOct 6 · 9 min readMikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOSSummary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thiblog.fiscybersec.com
KK4M1_n0_73Oct 5 · 15 min readDC-1: Drupalgeddon2, SUID binary to root shellSo I am going to be starting with this vuln machine. I'd say I'm starting to carve out a methodology with machines like this. First of all, I'll start with a netdiscover to figure out the IP address o0xk4m1.hashnode.dev
YYogeshwar PeelaSep 28 · 8 min readTryHackMe: Binary Heaven - WriteupSummary A locked-down TryHackMe box gating SSH access behind two credential-checking binaries: a small C program with an anti-debug/obfuscated string comparison, and a statically linked Go binary hidiexploitnotes.hashnode.dev
YYogeshwar PeelaSep 22 · 8 min readTryHackMe: Python Playground WriteupSummary Python Playground is a hard-rated TryHackMe box built around a "sandboxed" Python code execution service fronted by a Node.js/Express web app. The site advertises a blacklist-based filter thatexploitnotes.hashnode.dev
JJebitokSep 22 · 7 min readChallenge: Operation Coldstart (TryHackMe)Link to the challenge on TryHackMe: Operation Coldstart Volt Labs, a small SaaS shop, suspects an old staging server has rotted into an exposed liability. Mara has assigned you the engagement. Find ysharonjebitok.com
JJebitokSep 22 · 9 min readChallenge: Brr (TryHackMe)Link to the challenge on TryHackMe: Brr The cold never lies, but the SCADA panel guarding it just handed you the keys. Chase the chill all the way down. Note: The VM takes about 3 minutes to boot upsharonjebitok.com
YYogeshwar PeelaSep 10 · 10 min readTryHackMe - Olympus WriteupSummary Olympus is a Linux box built around an old Victor CMS 1.0 install hidden under /~webmaster/. An unauthenticated SQL injection in the CMS search feature was the root of the entire chain: it dumexploitnotes.hashnode.dev
JJebitokSep 9 · 13 min readLinux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual ensharonjebitok.com
JJebitokSep 6 · 11 min readChallenge: Expose (TryHackMe)Challenge on TryHackme: Expose Introduction Expose is a TryHackMe room focused on the risks of leaving unnecessary services running on a machine. The attack surface includes FTP, SSH, DNS, HTTP on a nsharonjebitok.com
